662 matches found
CVE-2026-0847
CVE-2026-0847 — NLTK Multiple CorpusReader Classes: Arbitrary File Read via Path Traversal -orange?style=for-the-badge Overview...
CVE-2026-12243-NLTK-PoC
CVE-2026-12243 — NLTK Path Traversal Lab A small, reproducible Docker lab that contrasts the percent-encoded path traversal behavior in NLTK 3.9.4 with the corrected behavior in NLTK 3.10.0. The vulnerable version validates the resource name before URL decoding. The fixed payload...
CVE-2026-0848
CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...
CVE-2026-0848-Scanner---Herramienta-de-Detecci-n
🔍 CVE-2026-0848 Scanner Detection tool for the CVE-2026-0848 vulnerability in NLTK arbitrary code execution in StanfordSegmenter. ⚡ Installation root@kitploit: git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...
EUVD-2026-67075
NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks...
EUVD-2026-66397
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions...
EUVD-2026-66396
NLTK: ReDoS in nltk.text.Text.findall via unvalidated user-supplied regular expressions...
CVE-2019-14751_PoC
CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...
EUVD-2026-65524
NLTK: Corpus Reader Sandbox Bypass...
EUVD-2026-65526
NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement...
EUVD-2026-65440
NLTK: Allowlisted pickle loaders still permit code execution in current source...
EUVD-2026-65227
NLTK: Entity-expansion DoS billion laughs via remaining raw ElementTree parses...
EUVD-2026-65228
NLTK: pathsec SSRF protection can be bypassed when a proxy is configured...
EUVD-2026-65229
NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution...
EUVD-2026-64339
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely...
EUVD-2026-64338
NLTK: Symlink-based sandbox bypass in FramenetCorpusReader bypasses the fix for CVE-2026-54292...
EUVD-2026-64337
NLTK: Stable FrameNet and NKJP readers parse outside-root XML...
GHSA-5WP5-5229-5G6Q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
NLTK's package downloader in nltk/downloader.py does not verify file integrity after download and before extraction. The download flow at lines 789-825: 1. File is downloaded to a temp path via HTTP 2. os.replacetmpfilepath, filepath moves it to the final location line 799 3. Extraction begins vi...